164.312(e)(2)(ii) Encryption of Transmissions (Addressable)
Technical safeguard · Addressable
The requirement as we hold it
Encryption of Transmissions (Addressable). Implement a mechanism to encrypt ePHI whenever deemed appropriate. NIST recommends defaulting to encryption for all ePHI transmissions, with documented exception only where infeasible.
The examiner asks
- Show me that ePHI transmissions are encrypted, and any place encryption was deemed infeasible.
- Where is the documented exception for that one?
Evidence to bring
- the transmission encryption configuration
- any infeasibility note
Source: 164.312(e)(2)(ii) at eCFR. Our statement of the clause, not the instrument verbatim.